@akinon/projectzero 1.126.19 → 1.126.20

package/CHANGELOG.md

@@ -1,5 +1,7 @@
 # @akinon/projectzero
 
+## 1.126.20
+
 ## 1.126.19
 
 ## 1.126.18

package/app-template/.env.example

@@ -4,6 +4,12 @@ NEXTAUTH_URL=http://localhost:3000
 NEXT_PUBLIC_MAP_API_KEY=YOUR_MAP_API_KEY
 NEXT_PUBLIC_GTM_KEY=GTM_KEY
 NEXT_PUBLIC_URL=http://localhost:3000
+# Theme editor origins the storefront accepts postMessage from, comma-separated.
+# Local: the editor dev server. Production: the theme editor extension's own
+# origin (the document that embeds the storefront), not the Omnitron shell.
+# Setting it also switches session cookies to SameSite=None, so a sign-in
+# survives the editor's cross-site preview iframe.
+NEXT_PUBLIC_THEME_EDITOR_ORIGINS=http://localhost:5174
 SERVICE_BACKEND_URL=https://02fde10fee4440269e695aa10707dfaf.lb.akinoncloud.com
 SITEMAP_S3_BUCKET_NAME=0fb534
 NEXT_PUBLIC_VIRTUAL_TRY_ON_API_URL=https://d2a26507c7094f359aba349b96a96881.lb.akinoncloud.com

package/app-template/CHANGELOG.md

@@ -1,5 +1,45 @@
 # projectzeronext
 
+## 1.126.20
+
+### Patch Changes
+
+- 55b89cb: ZERO-5206: Port the theme editor's app skeleton (chrome and page slots) to the v1 line
+
+  The `[pz]` layout now wraps the brand header and footer in `ChromeSlot` (the brand markup stays as the fallback) and mounts `ThemeModals`, so a designer can compose the header, the footer and modals from the theme editor. Basket, checkout (top/body/bottom outlets and the variants registry), auth, forgot and reset password, order success and the account area (menu, page body and the ten subpages) get the same slot layouts as 2.x, so the editor takes these pages over without any mounting in the brand. Account routes moved into route groups (`(dashboard)`, `orders/(list)`, `orders/[id]/(detail)`, `auth/(login)`); URLs are unchanged.
+
+  Inside the editor's cross-site preview iframe the storefront's cookies are now usable: when embedding is enabled (`NEXT_PUBLIC_THEME_EDITOR_ORIGINS` holds a valid origin, or outside production) the next-auth session, CSRF and callback cookies, the Django `csrftoken`, the commerce session cookies set at sign-in and the Set-Cookie headers relayed by the BFF and middlewares are sent as `SameSite=None; Secure`, and the BFF checks the request origin on every state-changing call. A storefront without the editor keeps the Lax defaults. The CSP `frame-ancestors` also lists the editor origins (`*.akinon.net`, `localhost:5174`).
+
+  The app depends on `@akinon/pz-theme` 2.0.143; `@akinon/pz-theme` and `@akinon/theme-contract` are transpiled and protected from plugin installs, and the Tailwind content globs include pz-theme's sources.
+
+- Updated dependencies [55b89cb]
+  - @akinon/next@1.126.20
+  - @akinon/pz-virtual-try-on@1.126.20
+  - @akinon/pz-akifast@1.126.20
+  - @akinon/pz-apple-pay@1.126.20
+  - @akinon/pz-b2b@1.126.20
+  - @akinon/pz-basket-gift-pack@1.126.20
+  - @akinon/pz-bkm@1.126.20
+  - @akinon/pz-checkout-gift-pack@1.126.20
+  - @akinon/pz-click-collect@1.126.20
+  - @akinon/pz-credit-payment@1.126.20
+  - @akinon/pz-cybersource-uc@1.126.20
+  - @akinon/pz-flow-payment@1.126.20
+  - @akinon/pz-google-pay@1.126.20
+  - @akinon/pz-gpay@1.126.20
+  - @akinon/pz-haso@1.126.20
+  - @akinon/pz-hepsipay@1.126.20
+  - @akinon/pz-masterpass@1.126.20
+  - @akinon/pz-masterpass-rest@1.126.20
+  - @akinon/pz-multi-basket@1.126.20
+  - @akinon/pz-one-click-checkout@1.126.20
+  - @akinon/pz-otp@1.126.20
+  - @akinon/pz-pay-on-delivery@1.126.20
+  - @akinon/pz-saved-card@1.126.20
+  - @akinon/pz-similar-products@1.126.20
+  - @akinon/pz-tabby-extension@1.126.20
+  - @akinon/pz-tamara-extension@1.126.20
+
 ## 1.126.19
 
 ### Patch Changes

package/app-template/package.json

@@ -1,6 +1,6 @@
 {
   "name": "projectzeronext",
-  "version": "1.126.19",
+  "version": "1.126.20",
   "private": true,
   "license": "MIT",
   "scripts": {
@@ -24,32 +24,33 @@
     "test:middleware": "jest middleware-matcher.test.ts --bail"
   },
   "dependencies": {
-    "@akinon/next": "1.126.19",
-    "@akinon/pz-akifast": "1.126.19",
-    "@akinon/pz-apple-pay": "1.126.19",
-    "@akinon/pz-b2b": "1.126.19",
-    "@akinon/pz-basket-gift-pack": "1.126.19",
-    "@akinon/pz-bkm": "1.126.19",
-    "@akinon/pz-checkout-gift-pack": "1.126.19",
-    "@akinon/pz-click-collect": "1.126.19",
-    "@akinon/pz-credit-payment": "1.126.19",
-    "@akinon/pz-cybersource-uc": "1.126.19",
-    "@akinon/pz-flow-payment": "1.126.19",
-    "@akinon/pz-google-pay": "1.126.19",
-    "@akinon/pz-gpay": "1.126.19",
-    "@akinon/pz-haso": "1.126.19",
-    "@akinon/pz-hepsipay": "1.126.19",
-    "@akinon/pz-masterpass": "1.126.19",
-    "@akinon/pz-masterpass-rest": "1.126.19",
-    "@akinon/pz-multi-basket": "1.126.19",
-    "@akinon/pz-one-click-checkout": "1.126.19",
-    "@akinon/pz-otp": "1.126.19",
-    "@akinon/pz-pay-on-delivery": "1.126.19",
-    "@akinon/pz-saved-card": "1.126.19",
-    "@akinon/pz-similar-products": "1.126.19",
-    "@akinon/pz-tabby-extension": "1.126.19",
-    "@akinon/pz-tamara-extension": "1.126.19",
-    "@akinon/pz-virtual-try-on": "1.126.19",
+    "@akinon/next": "1.126.20",
+    "@akinon/pz-akifast": "1.126.20",
+    "@akinon/pz-apple-pay": "1.126.20",
+    "@akinon/pz-b2b": "1.126.20",
+    "@akinon/pz-basket-gift-pack": "1.126.20",
+    "@akinon/pz-bkm": "1.126.20",
+    "@akinon/pz-checkout-gift-pack": "1.126.20",
+    "@akinon/pz-click-collect": "1.126.20",
+    "@akinon/pz-credit-payment": "1.126.20",
+    "@akinon/pz-cybersource-uc": "1.126.20",
+    "@akinon/pz-flow-payment": "1.126.20",
+    "@akinon/pz-google-pay": "1.126.20",
+    "@akinon/pz-gpay": "1.126.20",
+    "@akinon/pz-haso": "1.126.20",
+    "@akinon/pz-hepsipay": "1.126.20",
+    "@akinon/pz-masterpass": "1.126.20",
+    "@akinon/pz-masterpass-rest": "1.126.20",
+    "@akinon/pz-multi-basket": "1.126.20",
+    "@akinon/pz-one-click-checkout": "1.126.20",
+    "@akinon/pz-otp": "1.126.20",
+    "@akinon/pz-pay-on-delivery": "1.126.20",
+    "@akinon/pz-saved-card": "1.126.20",
+    "@akinon/pz-similar-products": "1.126.20",
+    "@akinon/pz-tabby-extension": "1.126.20",
+    "@akinon/pz-tamara-extension": "1.126.20",
+    "@akinon/pz-theme": "2.0.143",
+    "@akinon/pz-virtual-try-on": "1.126.20",
     "@hookform/resolvers": "2.9.0",
     "@next/third-parties": "14.1.0",
     "@react-google-maps/api": "2.17.1",
@@ -72,7 +73,7 @@
     "yup": "0.32.11"
   },
   "devDependencies": {
-    "@akinon/eslint-plugin-projectzero": "1.126.19",
+    "@akinon/eslint-plugin-projectzero": "1.126.20",
     "@semantic-release/changelog": "6.0.2",
     "@semantic-release/exec": "6.0.3",
     "@semantic-release/git": "10.0.1",

package/app-template/public/locales/en/checkout.json

@@ -160,5 +160,55 @@
     "processing": "Processing...",
     "pay_button": "Pay with Apple Pay",
     "payment_failed": "Payment failed"
+  },
+  "one_page": {
+    "edit": "Edit",
+    "continue_to_shipping": "Continue to shipping",
+    "continue_to_payment": "Continue to payment",
+    "contact": {
+      "title": "Contact information",
+      "guest_user": "Guest user",
+      "guest_badge": "Guest",
+      "guest_note": "You are continuing checkout as a guest."
+    },
+    "address": {
+      "title": "Delivery & billing address",
+      "shipping_label": "Delivery address",
+      "billing_label": "Billing address",
+      "use_for_billing": "Use the same address for billing",
+      "same_as_shipping": "Same as shipping",
+      "pick_different_billing": "Pick a different address if you'd like a separate billing destination."
+    },
+    "shipping": {
+      "title": "Shipping method"
+    },
+    "payment": {
+      "title": "Payment",
+      "select_method": "Please select a payment method to continue.",
+      "no_options": "No payment options are available at the moment."
+    },
+    "summary": {
+      "show_summary": "Show order summary",
+      "hide_summary": "Hide order summary",
+      "review_title": "Order details",
+      "deliver_to": "Deliver to",
+      "shipping_method": "Shipping method",
+      "payment_method": "Payment method"
+    },
+    "trust": {
+      "secure_title": "Secure checkout",
+      "secure_note": "Your payment is encrypted and processed securely. We never store your card details."
+    },
+    "basket": {
+      "title": "Your cart",
+      "empty": "Your cart is empty.",
+      "show": "Show items",
+      "hide": "Hide items",
+      "quantity": "Quantity",
+      "increase": "Increase quantity",
+      "decrease": "Decrease quantity",
+      "remove": "Remove from cart",
+      "update_error": "Could not update the cart. Please try again."
+    }
   }
 }

package/app-template/public/locales/tr/checkout.json

@@ -159,5 +159,55 @@
     "processing": "İşleniyor...",
     "pay_button": "Apple Pay ile Öde",
     "payment_failed": "Ödeme başarısız oldu"
+  },
+  "one_page": {
+    "edit": "Düzenle",
+    "continue_to_shipping": "Kargo seçimine geç",
+    "continue_to_payment": "Ödemeye geç",
+    "contact": {
+      "title": "İletişim bilgileri",
+      "guest_user": "Misafir kullanıcı",
+      "guest_badge": "Misafir",
+      "guest_note": "Alışverişe misafir olarak devam ediyorsunuz."
+    },
+    "address": {
+      "title": "Teslimat ve fatura adresi",
+      "shipping_label": "Teslimat adresi",
+      "billing_label": "Fatura adresi",
+      "use_for_billing": "Fatura adresi olarak da kullan",
+      "same_as_shipping": "Teslimat adresiyle aynı",
+      "pick_different_billing": "Faturayı farklı bir adrese istiyorsanız aşağıdan seçin."
+    },
+    "shipping": {
+      "title": "Kargo seçimi"
+    },
+    "payment": {
+      "title": "Ödeme",
+      "select_method": "Devam etmek için bir ödeme yöntemi seçin.",
+      "no_options": "Şu anda kullanılabilir bir ödeme yöntemi bulunmuyor."
+    },
+    "summary": {
+      "show_summary": "Sipariş özetini göster",
+      "hide_summary": "Sipariş özetini gizle",
+      "review_title": "Sipariş detayları",
+      "deliver_to": "Teslim adresi",
+      "shipping_method": "Kargo yöntemi",
+      "payment_method": "Ödeme yöntemi"
+    },
+    "trust": {
+      "secure_title": "Güvenli ödeme",
+      "secure_note": "Ödemeniz şifrelenir ve güvenli olarak işlenir. Kart bilgileriniz saklanmaz."
+    },
+    "basket": {
+      "title": "Sepetiniz",
+      "empty": "Sepetiniz boş.",
+      "show": "Ürünleri göster",
+      "hide": "Ürünleri gizle",
+      "quantity": "Adet",
+      "increase": "Adedi artır",
+      "decrease": "Adedi azalt",
+      "remove": "Sepetten çıkar",
+      "update_error": "Sepet güncellenemedi. Lütfen tekrar deneyin."
+    }
   }
 }

package/app-template/src/app/[pz]/account/(dashboard)/layout.tsx

@@ -0,0 +1,20 @@
+import { PLACEHOLDER_SLUGS } from '@akinon/pz-theme/src/chrome/placeholder-slugs';
+import { ROUTES } from 'routes';
+import AccountPageSlot from '../account-page-slot';
+
+// The account root screen lives in its own route group so its takeover slug
+// covers exactly this screen, not the whole account subtree.
+export default function DashboardLayout({
+  children
+}: {
+  children: React.ReactNode;
+}) {
+  return (
+    <AccountPageSlot
+      slug={PLACEHOLDER_SLUGS.accountDashboard}
+      path={ROUTES.ACCOUNT}
+    >
+      {children}
+    </AccountPageSlot>
+  );
+}

package/app-template/src/app/[pz]/account/account-page-slot.tsx

@@ -0,0 +1,35 @@
+import ChromeSlot from '@akinon/pz-theme/src/chrome/chrome-slot';
+import { buildAccountPageContext } from '@akinon/pz-theme/src/chrome/page-context';
+import { getServerSession } from 'next-auth/next';
+
+/**
+ * Shared takeover slot for the account subpages. Each subpage keeps its own
+ * layout so a composition replaces exactly one screen — a single slot higher
+ * up would leak one composition across every account route.
+ */
+export default async function AccountPageSlot({
+  slug,
+  path,
+  children
+}: {
+  slug: string;
+  path: string;
+  children: React.ReactNode;
+}) {
+  // The account layout above already gates auth; this read only feeds the
+  // context's user fields. Null-safe on purpose: nested layouts render in
+  // parallel with the parent's redirect for signed-out visitors.
+  const session = await getServerSession();
+
+  return (
+    <ChromeSlot
+      slug={slug}
+      fallback={children}
+      pageContext={buildAccountPageContext({
+        path,
+        sessionUser:
+          (session?.user as unknown as Record<string, unknown>) ?? null
+      })}
+    />
+  );
+}

package/app-template/src/app/[pz]/account/address/layout.tsx

@@ -0,0 +1,18 @@
+import { PLACEHOLDER_SLUGS } from '@akinon/pz-theme/src/chrome/placeholder-slugs';
+import { ROUTES } from 'routes';
+import AccountPageSlot from '../account-page-slot';
+
+export default function AddressLayout({
+  children
+}: {
+  children: React.ReactNode;
+}) {
+  return (
+    <AccountPageSlot
+      slug={PLACEHOLDER_SLUGS.accountAddresses}
+      path={ROUTES.ACCOUNT_ADDRESS}
+    >
+      {children}
+    </AccountPageSlot>
+  );
+}

package/app-template/src/app/[pz]/account/change-email/layout.tsx

@@ -0,0 +1,18 @@
+import { PLACEHOLDER_SLUGS } from '@akinon/pz-theme/src/chrome/placeholder-slugs';
+import { ROUTES } from 'routes';
+import AccountPageSlot from '../account-page-slot';
+
+export default function ChangeEmailLayout({
+  children
+}: {
+  children: React.ReactNode;
+}) {
+  return (
+    <AccountPageSlot
+      slug={PLACEHOLDER_SLUGS.accountChangeEmail}
+      path={ROUTES.ACCOUNT_CHANGE_EMAIL}
+    >
+      {children}
+    </AccountPageSlot>
+  );
+}

package/app-template/src/app/[pz]/account/change-password/layout.tsx

@@ -0,0 +1,18 @@
+import { PLACEHOLDER_SLUGS } from '@akinon/pz-theme/src/chrome/placeholder-slugs';
+import { ROUTES } from 'routes';
+import AccountPageSlot from '../account-page-slot';
+
+export default function ChangePasswordLayout({
+  children
+}: {
+  children: React.ReactNode;
+}) {
+  return (
+    <AccountPageSlot
+      slug={PLACEHOLDER_SLUGS.accountChangePassword}
+      path={ROUTES.ACCOUNT_CHANGE_PASSWORD}
+    >
+      {children}
+    </AccountPageSlot>
+  );
+}

package/app-template/src/app/[pz]/account/contact/layout.tsx

@@ -0,0 +1,18 @@
+import { PLACEHOLDER_SLUGS } from '@akinon/pz-theme/src/chrome/placeholder-slugs';
+import { ROUTES } from 'routes';
+import AccountPageSlot from '../account-page-slot';
+
+export default function ContactLayout({
+  children
+}: {
+  children: React.ReactNode;
+}) {
+  return (
+    <AccountPageSlot
+      slug={PLACEHOLDER_SLUGS.accountContact}
+      path={ROUTES.ACCOUNT_CONTACT}
+    >
+      {children}
+    </AccountPageSlot>
+  );
+}

package/app-template/src/app/[pz]/account/coupons/layout.tsx

@@ -0,0 +1,18 @@
+import { PLACEHOLDER_SLUGS } from '@akinon/pz-theme/src/chrome/placeholder-slugs';
+import { ROUTES } from 'routes';
+import AccountPageSlot from '../account-page-slot';
+
+export default function CouponsLayout({
+  children
+}: {
+  children: React.ReactNode;
+}) {
+  return (
+    <AccountPageSlot
+      slug={PLACEHOLDER_SLUGS.accountCoupons}
+      path={ROUTES.ACCOUNT_COUPONS}
+    >
+      {children}
+    </AccountPageSlot>
+  );
+}

package/app-template/src/app/[pz]/account/faq/layout.tsx

@@ -0,0 +1,14 @@
+import { PLACEHOLDER_SLUGS } from '@akinon/pz-theme/src/chrome/placeholder-slugs';
+import { ROUTES } from 'routes';
+import AccountPageSlot from '../account-page-slot';
+
+export default function FaqLayout({ children }: { children: React.ReactNode }) {
+  return (
+    <AccountPageSlot
+      slug={PLACEHOLDER_SLUGS.accountFaq}
+      path={ROUTES.ACCOUNT_FAQ}
+    >
+      {children}
+    </AccountPageSlot>
+  );
+}

package/app-template/src/app/[pz]/account/favourite-products/layout.tsx

@@ -0,0 +1,21 @@
+import { PLACEHOLDER_SLUGS } from '@akinon/pz-theme/src/chrome/placeholder-slugs';
+import { LiveWishlistPageContext } from '@akinon/pz-theme/src/chrome/live-wishlist-page-context';
+import { ROUTES } from 'routes';
+import AccountPageSlot from '../account-page-slot';
+
+export default function FavouriteProductsLayout({
+  children
+}: {
+  children: React.ReactNode;
+}) {
+  return (
+    <LiveWishlistPageContext>
+      <AccountPageSlot
+        slug={PLACEHOLDER_SLUGS.accountFavourites}
+        path={ROUTES.ACCOUNT_WISHLIST}
+      >
+        {children}
+      </AccountPageSlot>
+    </LiveWishlistPageContext>
+  );
+}

package/app-template/src/app/[pz]/account/layout.tsx

@@ -1,5 +1,8 @@
 import AccountBackButton from '@theme/views/account/back-button';
 import AccountMenu from '@theme/views/account/account-menu';
+import ChromeSlot from '@akinon/pz-theme/src/chrome/chrome-slot';
+import { PLACEHOLDER_SLUGS } from '@akinon/pz-theme/src/chrome/placeholder-slugs';
+import { buildAccountPageContext } from '@akinon/pz-theme/src/chrome/page-context';
 import { getServerSession } from 'next-auth/next';
 import { ROUTES } from 'routes';
 import { redirect } from '@akinon/next/utils/redirect';
@@ -16,11 +19,41 @@ export default async function AccountLayout({
   }
 
   return (
-    <div className="container flex py-10 px-4 xl:px-0">
-      <AccountMenu />
+    // Stacked on mobile, two columns on desktop. The brand markup hides
+    // itself on the breakpoints it does not serve, but a COMPOSED menu or
+    // page body has no such classes — in a no-wrap row it would render
+    // crushed next to its sibling on a phone; in a column it stacks.
+    <div className="container flex flex-col lg:flex-row py-10 px-4 xl:px-0">
+      {/* The menu keeps its own responsive column classes (incl. hiding
+          itself on mobile subpages), so the slot chain must stay
+          layout-transparent — hence `contents` on both wrappers. A menu
+          takeover renders on every account screen and replaces the logout
+          button too; the designer rebuilds it from the block vocabulary. */}
+      <ChromeSlot
+        slug={PLACEHOLDER_SLUGS.accountMenu}
+        fallback={<AccountMenu />}
+        className="contents"
+        fallbackClassName="contents"
+        pageContext={buildAccountPageContext({
+          path: ROUTES.ACCOUNT,
+          sessionUser: session.user as unknown as Record<string, unknown>
+        })}
+      />
       <div className="w-full flex-1">
         <AccountBackButton />
-
+        {/* The session is already awaited above, so the account context costs
+            no extra fetch. Profile-only fields (phone, gender) stay empty
+            until a live provider merges them in. */}
+        {/* Layout-level band on EVERY account screen. Never give this slot a
+            `fallback`: taking the shell over would replace `children` — and
+            with it every per-subpage slot mounted below. */}
+        <ChromeSlot
+          slug={PLACEHOLDER_SLUGS.accountShell}
+          pageContext={buildAccountPageContext({
+            path: ROUTES.ACCOUNT,
+            sessionUser: session.user as unknown as Record<string, unknown>
+          })}
+        />
         {children}
       </div>
     </div>

package/app-template/src/app/[pz]/account/orders/(list)/layout.tsx

@@ -0,0 +1,20 @@
+import { PLACEHOLDER_SLUGS } from '@akinon/pz-theme/src/chrome/placeholder-slugs';
+import { ROUTES } from 'routes';
+import AccountPageSlot from '../../account-page-slot';
+
+// The order list lives in its own route group so its takeover slug cannot
+// swallow the order detail and cancellation screens under the same segment.
+export default function OrdersLayout({
+  children
+}: {
+  children: React.ReactNode;
+}) {
+  return (
+    <AccountPageSlot
+      slug={PLACEHOLDER_SLUGS.accountOrders}
+      path={ROUTES.ACCOUNT_ORDERS}
+    >
+      {children}
+    </AccountPageSlot>
+  );
+}

package/app-template/src/app/[pz]/account/orders/[id]/(detail)/layout.tsx

@@ -0,0 +1,40 @@
+import React from 'react';
+import ChromeSlot from '@akinon/pz-theme/src/chrome/chrome-slot';
+import { PLACEHOLDER_SLUGS } from '@akinon/pz-theme/src/chrome/placeholder-slugs';
+import { LiveAccountOrderPageContext } from '@akinon/pz-theme/src/chrome/live-order-page-context';
+import { buildAccountPageContext } from '@akinon/pz-theme/src/chrome/page-context';
+import { getServerSession } from 'next-auth/next';
+import { ROUTES } from 'routes';
+
+/**
+ * Account order detail. Publishes the SAME `order` root as the success page,
+ * so a composition authored on one resolves on the other. Scoped to its own
+ * route group so a composed detail page cannot swallow the cancellation
+ * screen under the same order segment.
+ */
+export default async function Layout({
+  children,
+  params
+}: {
+  children: React.ReactNode;
+  params: { id: string };
+}) {
+  const { id } = params;
+  const session = await getServerSession();
+
+  return (
+    <div>
+      <LiveAccountOrderPageContext orderId={id}>
+        <ChromeSlot
+          slug={PLACEHOLDER_SLUGS.accountOrderDetail}
+          fallback={children}
+          pageContext={buildAccountPageContext({
+            path: ROUTES.ACCOUNT_ORDERS,
+            sessionUser:
+              (session?.user as unknown as Record<string, unknown>) ?? null
+          })}
+        />
+      </LiveAccountOrderPageContext>
+    </div>
+  );
+}

package/app-template/src/app/[pz]/account/profile/layout.tsx

@@ -0,0 +1,18 @@
+import { PLACEHOLDER_SLUGS } from '@akinon/pz-theme/src/chrome/placeholder-slugs';
+import { ROUTES } from 'routes';
+import AccountPageSlot from '../account-page-slot';
+
+export default function ProfileLayout({
+  children
+}: {
+  children: React.ReactNode;
+}) {
+  return (
+    <AccountPageSlot
+      slug={PLACEHOLDER_SLUGS.accountProfile}
+      path={ROUTES.ACCOUNT_PROFILE}
+    >
+      {children}
+    </AccountPageSlot>
+  );
+}

package/app-template/src/app/[pz]/auth/(login)/layout.tsx

@@ -0,0 +1,37 @@
+import ChromeSlot from '@akinon/pz-theme/src/chrome/chrome-slot';
+import { PLACEHOLDER_SLUGS } from '@akinon/pz-theme/src/chrome/placeholder-slugs';
+
+/**
+ * The login screen is handed to the theme editor here rather than in page.tsx,
+ * because the slot is an async server component and the page is a client one.
+ * With no composition published the slot renders the page untouched.
+ *
+ * The slot lives in a `(login)` route group so the composition covers exactly
+ * this screen: `auth/oauth-login` is a provider callback, and a login body
+ * mounted one level up would replace it too.
+ *
+ * No `pageContext`: an auth screen fetches no commerce data, and the blocks a
+ * designer rebuilds it from (`auth-form`, `register-form`, `oauth-buttons`)
+ * read the session client-side.
+ *
+ * Login and register stay on this ONE screen. Whether they read as tabs or as
+ * two forms side by side is composed here (the starter templates ship both
+ * shapes), so no second route is involved.
+ */
+export default function LoginLayout({
+  children
+}: {
+  children: React.ReactNode;
+}) {
+  return (
+    // `contents` on both wrappers keeps the slot chain layout-transparent, so
+    // an uncomposed login page keeps its own box model even where a brand's
+    // <main> is a flex or grid container.
+    <ChromeSlot
+      slug={PLACEHOLDER_SLUGS.auth}
+      fallback={children}
+      className="contents"
+      fallbackClassName="contents"
+    />
+  );
+}

package/app-template/src/app/[pz]/basket/layout.tsx

@@ -0,0 +1,25 @@
+import ChromeSlot from '@akinon/pz-theme/src/chrome/chrome-slot';
+import { LiveBasketPageContext } from '@akinon/pz-theme/src/chrome/live-basket-page-context';
+import { PLACEHOLDER_SLUGS } from '@akinon/pz-theme/src/chrome/placeholder-slugs';
+import { ROUTES } from '@theme/routes';
+
+/**
+ * The basket body is handed to the theme editor here rather than in page.tsx,
+ * because the slot is an async server component and the page is a client one.
+ * With no composition published the slot renders the page untouched.
+ *
+ * The provider sits above the slot so the composition binds the shopper's live
+ * basket: the basket is session-scoped and has no server data module, so a
+ * server-built context would be a snapshot that never moves.
+ */
+export default function BasketLayout({
+  children
+}: {
+  children: React.ReactNode;
+}) {
+  return (
+    <LiveBasketPageContext path={ROUTES.BASKET}>
+      <ChromeSlot slug={PLACEHOLDER_SLUGS.basket} fallback={children} />
+    </LiveBasketPageContext>
+  );
+}

package/app-template/src/app/[pz]/client-root.tsx

@@ -1,5 +1,7 @@
 'use client';
 
+import './configure-page-context';
+
 export default function ClientRoot({
   children
 }: {